MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b8fdb4d679e44dce5f94d31b2b02d247d6d9cadee2a0d6ef9711492a2d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111630

Malicious code in local-css-loader-ursa-venus npm...

EUVD-2025-114795

Malicious code in css-loader-relay-element-ui-gulp npm...

Malicious code in hermes-css-loader-request-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adebda2e2ae5a06e49e1e41ee6fedb093a0ef37a243ddb9e28e4847013c248e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112800

Malicious code in hermes-css-loader-request-restart npm...

EUVD-2025-114793

Malicious code in css-loader-soap-elektra-andromeda npm...

EUVD-2025-114792

Malicious code in css-loader-spinner-hermes-hydra npm...

Malicious code in css-loader-spinner-hermes-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8302d0741db7d221e02f8e9ed2a744e8586ed4f7241cb1249ff6f197772e806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123109

Malicious code in publish-shelljs-hexo-css-loader npm...

EUVD-2025-115286

Malicious code in cluster-css-loader-halley-cressida npm...

EUVD-2025-116932

Malicious code in acamar-css-loader-style-loader-readable npm...

EUVD-2025-113349

Malicious code in gacrux-dagda-koa-css-loader npm...

EUVD-2025-116383

Malicious code in auth-css-loader-node-sass-gacrux npm...

EUVD-2025-114808

Malicious code in css-loader-dione-barnard-slidev npm...

EUVD-2025-114802

Malicious code in css-loader-metalsmith-rest-tailwindcss npm...

EUVD-2025-124460

Malicious code in nightwatch-css-loader-charon-gemini npm...

Malicious code in css-loader-gatsby-oberon-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8a19af4e44ee7bff5a71b4d40822481fb8ccc14538ae978842ec212c121d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114796

Malicious code in css-loader-quantum-eslint-betelgeuse npm...

Malicious code in gacrux-dagda-koa-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b5ee59e11ee829934c641c5b26806bcec0bca1048843e128d64e3bfd3ef67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...